Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-14672: Snap7-RS users may experience system crashes due to buffer overflow

CVE-2025-14672 · published 10 months ago

Summary

A bug in Snap7-RS up to version 1.142.1 can cause a system crash if a malicious actor exploits it. This could happen remotely, and a proof-of-concept exploit exists. Users should update to a fixed version to avoid potential crashes.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
gmg137	snap7-rs	<= 1.142.1 `cpe:2.3:a:gmg137:snap7-rs::::::::`

Original advisory text

A flaw has been found in gmg137 snap7-rs up to 1.142.1. This impacts the function TSnap7MicroClient::opWriteArea of the file s7_micro_client.cpp. Executing a manipulation can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.

References

https://gitee.com/gmg137/snap7-rs/
https://gitee.com/gmg137/snap7-rs/issues/ID2H8E Exploit Issue Tracking Vendor Advisory
https://vuldb.com/?ctiid.336401 Permissions Required VDB Entry
https://vuldb.com/?id.336401 Third Party Advisory VDB Entry

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker partial control

Severity

5.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-119Buffer Overflow

CWE-122Heap-based Buffer Overflow

Timeline

Published14 Dec 2025

Updated4 Nov 2026

First seen6 Mar 2026

Sources

CVE-2025-14672 · NVD

Track software like this

Free during beta